Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.mft
File: 5HQG9JgrYYJMj9RLge3gqZ_HJOA.mft (raw, json)
Hash identifier: AWylIBAy7NSrOu/gzqfmXeQqJzskiRbaQ2cjrUn4dZU=
Subject key identifier: CA:33:82:ED:20:26:8B:BD:E1:71:97:5E:E7:95:5C:A0:A4:DC:4F:00
Authority key identifier: E4:74:06:F4:98:2B:61:82:4C:8F:D4:4B:81:ED:E0:A9:9F:C7:24:E0
Certificate issuer: /CN=e47406f4982b61824c8fd44b81ede0a99fc724e0
Certificate serial: 019A145FFE99AC800D6C318396CA92F6E92B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5HQG9JgrYYJMj9RLge3gqZ_HJOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.mft
Manifest number: 0BA3
Signing time: Fri 24 Oct 2025 04:00:26 +0000
Manifest this update: Fri 24 Oct 2025 04:00:26 +0000
Manifest next update: Sat 25 Oct 2025 04:00:26 +0000
Files and hashes: 1: 5HQG9JgrYYJMj9RLge3gqZ_HJOA.crl (hash: GFy41dW5zZn9Nlp0fOVyX9jA7Qd9XXx3A3hRGpM/Lu4=)
2: uzOfDn3na_0H4FMYAvULbyI0B6c.roa (hash: uAuwh9KcLGGG4HeIvB3vA//BXxot+F12ayTtv/6riqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5HQG9JgrYYJMj9RLge3gqZ_HJOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:14:5f:fe:99:ac:80:0d:6c:31:83:96:ca:92:f6:e9:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e47406f4982b61824c8fd44b81ede0a99fc724e0
Validity
Not Before: Oct 24 04:00:26 2025 GMT
Not After : Oct 25 04:00:26 2025 GMT
Subject: CN=ca3382ed20268bbde171975ee7955ca0a4dc4f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2a:94:ec:c2:79:cd:3b:98:18:b1:66:a4:ea:
1f:e0:8e:0b:36:a7:e0:26:1b:fe:9c:8c:eb:9d:fb:
cc:dd:f2:15:85:0b:23:17:9b:af:cf:b5:6a:ff:3c:
1a:d7:a4:ca:76:85:c6:b7:a7:1b:9b:76:32:af:9a:
68:b2:2b:c4:6c:bf:06:1d:7a:d0:7f:2f:39:c2:97:
48:9a:d3:d9:d2:62:79:53:9c:50:89:95:a3:eb:b3:
09:17:4f:53:cf:89:13:c0:b8:3d:ce:a1:68:69:a2:
3e:dd:4a:8f:29:8f:11:00:7b:44:4a:b4:55:1e:be:
87:25:8d:51:94:8d:68:74:c8:41:4e:33:b3:08:36:
1a:15:ef:1c:fa:74:e9:e6:e9:33:48:ad:02:46:ac:
86:1a:63:ef:e8:9c:60:73:49:c4:cf:e0:09:63:40:
8d:0d:f4:18:77:9d:79:a3:af:b5:1c:66:64:af:df:
ab:d9:cc:ab:bc:03:f0:b3:18:3b:75:40:f5:7d:ba:
88:61:36:88:46:43:5f:1e:c8:1d:cd:2c:d5:73:cd:
5b:a1:f3:33:1c:30:90:32:d6:5e:d6:90:54:61:45:
08:ea:0c:d6:58:67:db:eb:a8:46:e5:b8:b9:d9:f7:
af:55:07:82:76:68:88:2e:c3:9a:a6:1d:db:55:2a:
89:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:33:82:ED:20:26:8B:BD:E1:71:97:5E:E7:95:5C:A0:A4:DC:4F:00
X509v3 Authority Key Identifier:
keyid:E4:74:06:F4:98:2B:61:82:4C:8F:D4:4B:81:ED:E0:A9:9F:C7:24:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HQG9JgrYYJMj9RLge3gqZ_HJOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:f5:2b:0f:30:9e:ab:47:7a:f1:8d:a2:a4:c9:b1:fc:ae:c9:
3f:7b:b9:07:29:de:23:8a:ca:18:8a:19:c6:e6:44:3c:df:95:
8f:18:c3:61:94:8c:34:c6:bf:f7:be:6a:fd:36:6c:9e:ea:d1:
a8:81:c4:44:47:6c:41:0a:8c:d1:5c:fb:13:2d:87:85:38:50:
8f:98:56:5f:56:6e:cd:3b:40:d4:23:03:2f:75:68:6d:ca:c5:
27:14:9c:4c:32:ee:b3:a3:cd:4d:65:7a:e1:16:81:3a:1d:4f:
7b:66:c7:79:d1:9b:a1:d0:ea:d2:46:ac:b8:fa:50:55:30:3e:
07:83:14:32:72:4e:bc:b6:0c:b9:dd:0e:a8:04:b2:92:85:1f:
28:8a:03:41:8a:c9:ad:13:cd:99:43:10:2c:cb:50:a5:06:eb:
c3:df:51:24:e7:bc:b8:a1:5f:ee:e1:49:14:90:7f:ad:2b:4b:
b7:55:b6:da:c6:94:57:9b:77:62:d8:ba:3f:d1:02:b5:6a:c3:
6e:f6:73:34:9e:e1:a4:c7:0e:6a:52:2c:66:fa:34:ec:4c:7d:
68:8b:40:b5:25:ad:21:0b:cc:fa:a6:df:cf:65:24:6a:7b:07:
d1:3f:ec:54:15:83:09:db:1d:bf:f4:52:3a:33:c9:bd:10:2e:
ae:71:3c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 11:38:51 2025 by rpki-client